General

  • Target

    New Client.exe

  • Size

    65KB

  • MD5

    286eec8031073675f717eedd89f0aec2

  • SHA1

    60949f13b977bee5535cf4f730b498c7046294d1

  • SHA256

    742a164e003c21a29bfccdfa1145a8c842acef13534452052599cac7689b1327

  • SHA512

    1f8f7ef10395958012b8410715a7c3f415920f882c790bfe3c778a9b7009be0622015ad30fa3190a321d4c963da6e8cf7f3373c27cf26b40d03fe3a4b843de66

  • SSDEEP

    1536:W9awkWoN36tlQviFw1YARlBnvbKfLteF3nLrB9z3nCaF9beS9vM:W9awkWoN36tlQviFCrnBn+fWl9zSaF9y

Score
10/10

Malware Config

Extracted

Family

njrat

Version

Platinum

Botnet

долбаеб

C2

127.0.0.1:37615

Mutex

Client.exe

Attributes
  • reg_key

    Client.exe

  • splitter

    |Ghost|

Signatures

  • Njrat family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • New Client.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections